Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: I9AyU73eHATCwA2ZbX6TedpCeSgjgDR7PPJ1s4abpKE=
Subject key identifier: F0:70:F9:FC:EB:12:D0:FB:2E:B2:B4:18:C6:E6:9B:12:2A:95:3E:5E
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0198D4731653F8B52606C79E59E4B66128A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:48 +0000
Manifest this update: Sat 23 Aug 2025 01:02:48 +0000
Manifest next update: Sun 24 Aug 2025 01:02:48 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: Q652Jy5V6dcGr83DeTtjkFzQyAg4GD0hzepSoPR4Bog=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:16:53:f8:b5:26:06:c7:9e:59:e4:b6:61:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Aug 23 01:02:48 2025 GMT
Not After : Aug 24 01:02:48 2025 GMT
Subject: CN=f070f9fceb12d0fb2eb2b418c6e69b122a953e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:62:e6:2d:0b:a8:14:59:5f:81:e2:28:5c:
de:a0:d0:ce:f5:03:e7:d1:53:2b:a3:0d:75:81:76:
52:85:e8:ee:aa:d4:19:4e:92:b1:9a:7d:76:80:db:
f1:0a:38:83:f4:28:9d:53:62:3e:47:5c:a9:a2:e4:
94:38:10:b6:cc:88:d2:25:d9:32:e6:f2:00:d4:31:
e3:70:06:cc:47:b5:16:1e:fb:a3:0f:e1:5d:01:fc:
a7:84:7f:82:e5:8b:a6:5d:6f:0d:a3:5d:65:39:85:
cb:b7:be:44:c0:ea:d2:b7:ef:ac:70:89:c0:73:a2:
f7:91:b2:57:3f:aa:a7:67:18:51:f0:d1:76:8b:f4:
c8:f4:a4:25:4a:27:86:f6:0b:8a:f6:7e:55:1b:0d:
3a:48:dc:30:3c:d8:6c:e4:ff:ba:2c:35:ac:e5:58:
ef:f4:ff:21:cb:e7:e7:72:54:85:70:4b:bb:f1:42:
39:b9:d2:ee:dc:df:17:80:e5:b2:00:96:5a:18:7c:
f2:61:30:e6:35:9f:0d:fc:fb:8e:f7:1e:3e:d9:b4:
a9:fa:ff:ea:3a:5f:5b:9b:7e:1c:d4:71:f2:0b:de:
d2:01:cf:ec:e3:7b:13:e4:0b:6b:b7:71:70:f5:ed:
9f:d7:b6:11:a6:3e:9d:d0:da:4a:e6:dd:3e:c9:c8:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:F9:FC:EB:12:D0:FB:2E:B2:B4:18:C6:E6:9B:12:2A:95:3E:5E
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:16:14:84:79:93:87:ce:5f:ee:6e:64:75:31:6b:6e:dd:c4:
2f:f9:e0:24:6b:ce:9c:54:56:97:18:73:ed:65:2c:dc:e5:88:
b9:c9:88:04:80:6e:c2:40:4a:e0:27:3f:4d:19:dc:b9:5b:52:
fd:12:e1:0c:da:e3:b1:99:37:93:6c:d1:32:5a:0a:5a:27:e5:
26:c3:9e:bd:9c:ef:a4:7b:53:2e:0b:94:0c:73:4f:5b:39:5e:
78:8e:a9:46:be:bc:89:8e:49:9c:66:6e:bf:9f:c1:16:8b:e9:
ea:0c:23:73:36:aa:58:39:89:d8:46:dd:fd:ed:fe:70:a9:8f:
c6:40:a1:e1:b6:e9:a6:7c:4e:30:a4:21:0d:f2:29:3d:13:40:
dc:f0:f6:f9:bb:16:01:3b:88:13:ec:73:7b:49:7a:25:fc:7b:
00:84:e2:a6:e1:f0:9c:1d:40:d7:73:a2:45:f5:37:2f:86:f3:
83:a4:15:05:d4:8d:28:27:f7:7e:27:e4:72:45:1a:6e:53:ad:
6d:48:a7:c6:a3:1f:cb:ad:22:00:34:06:35:8a:21:02:7e:c5:
1c:98:80:f3:6e:8e:9d:17:0d:5d:8d:6f:fb:48:56:31:1e:3d:
48:d4:d7:d1:41:17:4e:7e:17:4b:04:85:e9:1d:de:8b:87:6c:
29:65:c8:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxZT+LUmBseeWeS2YSigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTI1MDllNGYyYTczMGUxNjk5MzdkNDA4MzNiYjg5M2Vl
N2I5OGMwHhcNMjUwODIzMDEwMjQ4WhcNMjUwODI0MDEwMjQ4WjAzMTEwLwYDVQQD
EyhmMDcwZjlmY2ViMTJkMGZiMmViMmI0MThjNmU2OWIxMjJhOTUzZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBBi5i0LqBRZX4HiKFzeoNDO9QPn
0VMrow11gXZShejuqtQZTpKxmn12gNvxCjiD9CidU2I+R1ypouSUOBC2zIjSJdky
5vIA1DHjcAbMR7UWHvujD+FdAfynhH+C5YumXW8No11lOYXLt75EwOrSt++scInA
c6L3kbJXP6qnZxhR8NF2i/TI9KQlSieG9guK9n5VGw06SNwwPNhs5P+6LDWs5Vjv
9P8hy+fnclSFcEu78UI5udLu3N8XgOWyAJZaGHzyYTDmNZ8N/PuO9x4+2bSp+v/q
Ol9bm34c1HHyC97SAc/s43sT5Atrt3Fw9e2f17YRpj6d0NpK5t0+ycg6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBw+fzrEtD7LrK0GMbmmxIqlT5eMB8GA1UdIwQY
MBaAFBoSUJ5PKnMOFpk31Agzu4k+57mMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt
NDE5NmIwZWFjZDI3LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3
LzEvR2hKUW5rOHFjdzRXbVRmVUNETzdpVDdudVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhYUhHmT
h85f7m5kdTFrbt3EL/ngJGvOnFRWlxhz7WUs3OWIucmIBIBuwkBK4Cc/TRncuVtS
/RLhDNrjsZk3k2zRMloKWiflJsOevZzvpHtTLguUDHNPWzleeI6pRr68iY5JnGZu
v5/BFovp6gwjczaqWDmJ2Ebd/e3+cKmPxkCh4bbppnxOMKQhDfIpPRNA3PD2+bsW
ATuIE+xze0l6Jfx7AITipuHwnB1A13OiRfU3L4bzg6QVBdSNKCf3fifkckUablOt
bUinxqMfy60iADQGNYohAn7FHJiA826OnRcNXY1v+0hWMR49SNTX0UEXTn4XSwSF
6R3ei4dsKWXIBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:36 2025 by rpki-client